Centralized monitoring has improved real-time issue tracking and reduced root cause analysis time
What is our primary use case?
Coralogix serves as my main observability tool, similar to Kibana and Datadog. It provides observability and monitoring of all troubleshooting for all infrastructures and systems in real time. I can analyze and perform root cause analysis in real time, and it helps with logs and real-time access to logs, whether they are structured or unstructured types. It covers all databases, applications, and application-specific logs such as traces. I can use that alongside all metrics, security data, and dashboards. There are certain dashboards available, so most of the use cases we have been using this.
On a day-to-day basis, the use cases for Coralogix include integrating dashboards, integrating Slack and Teams notifications for all opportunities. Alongside, I get the logs in real time and can store whatever is necessary. I can archive certain logs as well, and it has security information and event management, the SIEM capabilities. It can integrate with Prometheus and Grafana, the open-source technologies available, and the open telemetry technologies that are available in the market today.
A specific scenario where Coralogix helped me is when we log into services and systems, and most of the time certain nodes in the cluster, one of the nodes gets down. When one of the nodes is down, I need to log into certain logs or check the services to determine which services are down, and based upon the services, I need to go to the specific log section, take out the logs and see. During the timestamp, I have to analyze the logs along with the timestamp and see what is happening. I need to see the post-event analysis and post-event logs to determine why the server or machine is down, what the cause is, and any specific issues. Coralogix helps with all real-time logs, pattern, and real-time analysis, providing an overview of what is happening. Instead of directly logging into the server, I just go to the Coralogix dashboard and see the logs and the machine, and I perform my RCA, whether I am the system engineer or the system administrator.
What is most valuable?
One of the best features that Coralogix offers is that it is integration friendly. I can seamlessly work with different cloud providers including AWS, Azure, and GCP. I can monitor Kubernetes or Docker platforms as well, and I can integrate with the DevOps chain including Jenkins and all infrastructure code, Terraform, or Ansible.
Coralogix has positively impacted my organization by providing a centralized console to monitor the dashboard, giving me rich flexibility to see different sorts of data that is spread across the logs, metrics, or traces, which are the typical pillars of the observability tool. I have the interface where I can use the drag-and-drop feature, and I can create different types of charts. Mainly, I have the line charts and time series ones that I generally use in many use cases, gauges, tables, pie charts, or markdown widgets. These are the ones generically available, and I can switch between the visualization types. I am getting the underlying query in that and can import and export dashboards built upon the JSON format. I can have my own APIs integrated with my dashboards as well, such as with Terraform, which is useful for scaling across my environments. Regarding root cause analysis, mainly what I can do is correlate across all of the layers because the main logs that I work on are storage-related, including CIFS, NFS, SAN traffic, and the metrics including storage, throughput, or VM resource usage. Being able to view logs, metrics, or traces available, I get all of these in one place, and I can do root cause analysis much quicker.
What needs improvement?
I feel there should be room for improvement with Coralogix. Since we are in the present-day generation, I believe there can be more AI integration. Many AI tools are out in the market, and the focus should be on integrating AI with Coralogix as well as expanded capabilities for all notification centers or notification routing. I would appreciate more integrations with different vendors for notification and support.
In terms of documentation, I think there can be more user-friendly documentation that stresses more on day-to-day issues.
For how long have I used the solution?
I have been using Coralogix for more than two to three years.
What do I think about the stability of the solution?
In my experience, Coralogix is stable as I have not faced any downtime or reliability issues.
What do I think about the scalability of the solution?
Handling scaling with Coralogix is good, as it is easy to scale up or down as my needs change. Coralogix handles growth and increased workloads smoothly regarding scalability.
How are customer service and support?
My experience with customer support is neutral, as I have not needed help from their support team. Once I deal with them for any issues, I will know more about their support.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I did previously use a different solution, specifically evaluating all the solutions available in the market alongside Coralogix. We did use Datadog as well, which is similar to Coralogix. At times we prefer going with partners requiring high-end visibility and more integration and use cases; during those times, customers ask for Datadog. However, when they are more price-sensitive, we typically opt for Coralogix.
How was the initial setup?
My experience with pricing, setup cost, and licensing for Coralogix is that everything was straightforward without challenges.
What was our ROI?
I have seen a return on investment with Coralogix, particularly in terms of time saved. There is no need to struggle over things; I have to get the things in place, and because it is a straightforward deployment, especially since most of my environments are in the cloud and a mix of on-premises, it has been straightforward.
What's my experience with pricing, setup cost, and licensing?
To monitor and manage costs associated with Coralogix, I analyze my trend, looking at how the data is being ingested. Generally, it is charged based on what we store, and therefore there are certain measures we take internally to keep this aligned and reduce our costs to a certain phase.
Which other solutions did I evaluate?
Before choosing Coralogix, I evaluated other options, particularly Datadog.
What other advice do I have?
My advice for others looking into using Coralogix is that I would definitely recommend it if they are price-sensitive and need an observability tool with all of the capabilities in the observability chain, covering logs, metrics, and traces. With Coralogix in place, users can get most of the things sorted for developers and operations teams. Typically, the support or operations team will have more analysis into issues or what is happening in the systems or infrastructure, allowing them to analyze at a faster scale rather than directly logging into machines. I would rate this product an 8 out of 10.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
A Cost-Effective and Powerful APM Tool for Observability
What do you like best about the product?
The powerful apm tool it is in which we can use and see our application logs metrics and traces a cost effective Observability tool
What do you dislike about the product?
Nothing as its a good Observability tool that i have been using
What problems is the product solving and how is that benefiting you?
Providing Observability for my applications and giving us logs metrics and traces
SIEM with great integration with AI
What do you like best about the product?
- so far the data can be gather from many systems without any issue.
- dashboard and information can be customize as what we need
- security rule can be integrated with one and another easily
What do you dislike about the product?
The application is quite advanced and offers many features, so we need to spend some time learning how to use it effectively. The user interface appears more complicated compared to other SIEM tools I have used before.
What problems is the product solving and how is that benefiting you?
- to have critical alert only that can be reach to the team
- to have AI for creating query so we don't have spend to much time in there
it helps to understand the logs easier
What do you like best about the product?
its easy to build the dataprime query using the query assistant
What do you dislike about the product?
everything works good, meet the expectation
What problems is the product solving and how is that benefiting you?
It really helps with monitoring alerts in the company, and it also makes queries and analysis easier because there is an AI feature that is easy to understand.
good experience
What do you like best about the product?
liked about parsing rules and alert rules flow
What do you dislike about the product?
about regex we can have ai for that also
What problems is the product solving and how is that benefiting you?
in incident response
Very versatile SIEM that I have used
What do you like best about the product?
Coralogix is very versatile and can be customized based on our needs
What do you dislike about the product?
Sometime, the connector of several compliance is not ready yet, so we need to route the logs from the syslog and that's make the integration is not smooth
What problems is the product solving and how is that benefiting you?
Coralogix can be integrated for many of appliance and it benefit to us to connect and send many logs of the devices that we have
Great product with potential expanding features that can be done in the future
What do you like best about the product?
Data prime correlation with query assistant AI.
Data prime give you capabilities to done complex query and give the visibilities for user.
And AI, make it more easy to build complex query data prime.
What do you dislike about the product?
Lucene query. compared with dataprime, lucene feels like way to old.
What problems is the product solving and how is that benefiting you?
visualize trends and usage of our cloud infrastructure. we can know what happened in the past and possibilities in upcoming future.
Coralogix
What do you like best about the product?
I can easily find any IP address that users are targeting, making it easier to detect.
What do you dislike about the product?
The UI needs to be changed to make it easier to use.
What problems is the product solving and how is that benefiting you?
I can easily find which IP to go to.
Awesome
What do you like best about the product?
we can use AI for query and also its easy to set alert.
What do you dislike about the product?
Menu is to much, hope make it simple in the future.
What problems is the product solving and how is that benefiting you?
the Corralogix can integrate with others
This my first time using coralogix and it is easy to use
What do you like best about the product?
Ease of use and good customer support and ease of implementation
What do you dislike about the product?
To much alert on the extension that give us false positive
What problems is the product solving and how is that benefiting you?
Some time for tuning alert